August 19, 2017
View d7bf5e3

Remove double defined alarm

Simon Vikstrom authored on 2017/08/19 16:38:35
August 9, 2017
View cf6e1c5

seccomp: whitelist quotactl with CAP_SYS_ADMIN

Panagiotis Moustafellos authored on 2017/08/09 02:01:53
May 23, 2017
View 2db0531

Whitelist adjtimex get operation. Adjustment operations are gated by CAP_SYS_TIME

Miklos Szegedi authored on 2017/05/23 14:42:47
May 9, 2017
View dcf2632

Revert "Block obsolete socket families in the default seccomp profile"

Justin Cormack authored on 2017/05/09 22:21:19
May 2, 2017
View cd45643

seccomp: Allow personality with UNAME26 bit set.

Ian Campbell authored on 2017/05/02 23:05:01
March 20, 2017
View 3ab4961

profiles: seccomp: allow clock_settime when CAP_SYS_TIME is added

Antonio Murdaca authored on 2017/03/20 19:00:34
March 8, 2017
View 9067ef0

Seccomp Update

Justin Cormack authored on 2017/03/08 07:19:46
February 13, 2017
View 52d8f58

Allow sync_file_range2 on supported architectures.

Gabriel Linder authored on 2017/02/13 21:55:53
January 29, 2017
View d6adcd6

Add two arm specific syscalls to seccomp profile

Justin Cormack authored on 2017/01/29 23:53:15
December 3, 2016
View 7e3a596

Block obsolete socket families in the default seccomp profile

Justin Cormack authored on 2016/12/03 01:41:26
July 13, 2016
View 5ff21ad

New seccomp format

Antonio Murdaca authored on 2016/07/13 22:41:30
June 16, 2016
View bdf01cf

Move mlock back into the default ungated seccomp profile

Justin Cormack authored on 2016/06/16 05:25:27
May 26, 2016
View 9ed6e39

Do not restrict chown via seccomp, just let capabilities control access

Justin Cormack authored on 2016/05/26 04:49:30
May 24, 2016
View a83cedd

Enable seccomp on ppc64le

Justin Cormack authored on 2016/05/24 07:19:19
May 6, 2016
View a01c4dc

Align default seccomp profile with selected capabilities

Justin Cormack authored on 2016/05/06 23:17:41